Related
Ok guys, first of all Scotty2 gets all the credit for the program R&D. I used my device as a test bed and have tried a couple different kernels (Gr8Gorilla's O/C Kernel and the stock kernel).
Now for the boring stuff ...
This is a very invasive way of rooting your device but the benefit is TRUE S=Off and root privileges throughout the system. As such, you do this at your own risk and if you brick your device neither Scotty2 nor myself are responsible, YOU ARE!!! Do this at your own risk!!!
This is not for the faint of heart and if you have any reservations about doing things like this do not do it.
This process will do three things for your device. I will explain them here:
1. It will set up Super CID on your device allowing you to flash any carriers rom (not just tmobile). Giving you more freedom with your choice of software. The software still needs to be device specific to the glacier for compatability reasons though. Like vodafone glacier roms etc.
2. It will subsidy unlock your device. In other words, it will SIMUNLOCK your phone allowing you to use an AT&T sim card and so on in your device without needing the unlock code from HTC.
3. Most important of all it will turn the RADIO S=Off. This is the ultimate S=Off because the radio is what controls the security flag in the first place. Once you turn it off here it is off everywhere and will allow you pure unadulterated access to your device.
This process will not change your bootloader (unless your on 0.86.0000 and you follow the optional steps).
Now, you may be asking "Why do this? I already have root from your other guide and it has given me r/w access to system and recovery. I thought this meant we had permanent S=Off." This is only partially true. We have had an engineering bootloader and "Label" s=off not radio s=off. When you turn the security off in radio it is off permanently no matter what hboot you have installed engineering or otherwise. However, it is optional but you can still copy the engineering hboot over and it will allow you to flash whatever you like without (as much) fear of bricking your device.
This guide assumes you know how to use ADB. If you do not there are guides all over XDA to show you how. There is even a really good one in this forum. Also here is a video on how to setup adb discovered by topgun303: http://www.youtube.com/watch?v=1UF5w1dKe2U
*NOTE*
For some reason this process can bork your recovery. If you notice after following the steps below that in order to reboot from recovery you have to uninstall/reinstall the battery and hit the power button, just install/reinstall clockwork recovery through Rom Manager in the android market and it will fix your problem.
CONFIRMED: Guide does work for pre-OTA devices!!! Thanks xanz!
Here we go:
If you are already permarooted per the other guide just follow the first 11 steps.
Make sure you have visionary installed on your device. (If you were already permarooted w/s=off ignore this step.)
Download this file:
http://www.mediafire.com/?s7afymwe2wb3x60 New version of gfree with more options! See below.
md5sum: b73c56ca0e21664c5756d4ad295063c5
1. Now unzip the file into your SDK tools directory.
2. Plug your device into your computer.
3. Now open explorer and hold down shift at same time you right mouse click on your SDK tools directory (platform-tools if you have the R8 version of the SDK). Select open command window here. If you are in linux (ubuntu) right mouse click on your SDK tools folder, choose actions, and choose open command window(or whatever it's called). Otherwise, open a command prompt and cd your way to your SDK tools directory.
4. Type "adb push gfree /data/local" and hit enter.
Optionally, you could dl the file to your phone use androzip or something like it to unzip the file and then use root explorer to move the file named gfree to /data/local. Not the gfree.h file. All the other files are source code inlcuded for the gnu license. This would skip the first 4 steps.
5. Now unplug your device from the computer.
6. Run visionary to gain temp root. (If you were already permarooted w/s=off ignore this step.)
7. Open terminal emulator on your device, type "su", and hit enter to gain root privileges.
8. Type "cd /data/local" and hit enter.
9. Now type "chmod 777 gfree" and hit enter to make the program executable.
10. Type "./gfree -f" and hit enter.
New features in gfree.
gfree usage:
gfree [-h|-?|--help] [-v|--version] [-s|--secu_flag on|off]
-h | -? | --help: display this message
-v | --version: display program version
-s | --secu_flag on|off: turn secu_flag on or off
-c | --cid <CID>: set the CID to the 8-char long CID
-S | --sim_unlock: remove the SIMLOCK
With the new features you can turn off one thing at a time. You can also turn security back on and set the CID back to stock if you wish. To turn simlock back on you still have to follow the revert procedures on this page as the information that is patched to turn the lock off is encrypted and we can't write back to it other than restoring the entire image.
So, if you wanted to leave simlock on but turn security off and set super CID the command would be "./gfree --secu_flag off --cid 11111111" + enter. The -f switch after ./gfree that is now in the above step (./gfree -f) just tells gfree to patch everything.
11. Wait for the program to finish and then reboot into HBoot to see if S=Off. Also, check your bootloader version. If it says s=off and has bootloader version 0.86.0000 it worked.
If you already had hboot 0.85.2007 you can check it through the hboot menu. It gives you an option for "system info" in the hboot menu. Highlight it and hit power. It should say CID = 11111111 or something like that. If it does your golden.
Congratulations!
12. If this is the first time you have rooted your device you will need to run visionary again (temproot w/set system r/w after root checked and then attempt permroot) to make root privileges permanent and then reboot again. Now "su" should work properly for you.
Gfree writes a backup of the file that it patches named Part7backup-numbers.bin on your sdcard. I suggest putting this file in a safe place as it is the only way to revert if you need to.
[Optional] Steps to flash engineering bootloader.
1. Restart your phone and plug it back into your computer.
2. Download this file: http://www.megaupload.com/?d=NN5726Z8
md5sum: df4fd77f44993eb05a4732210d2eddc6
3. Copy the file to your SDK tools directory.
4. Open a command prompt again and cd into your SDK tools directoty (platform-tools if your on the new R8 SDK).
5. Type "adb push hboot_dhd.nb0 /data/local" and hit enter.
6. Now open terminal on your device and type "su" and enter to gain root priviliges.
7. Type "cd /data/local" and enter.
8. Now type "dd if=hboot_dhd.nb0 of=/dev/block/mmcblk0p18" and hit enter.
9. You should see something like: 2048 bytes in 2048 bytes out 1048576 bytes copied blah blah blah.
10. Now restart the device into hboot and check if your bootloader version is 0.85.2007. That is what you want to see.
Congratulations, you now have a TRUE root and engineering bootloader on your shiny MT4G!!!
Procedure to revert
1. Rename the part7backup file that you already have to something just so you know that it is the original backup.
2. Open up terminal emulator or adb shell and type "su" + enter to get root privileges.
3. Type "cd /data/local" and hit enter.
4. Now type "./gfree -f" + enter to run gfree again. It will disable wp on the emmc and remove the brq filter in the kernel. (as well as make another backup, which you can delete if you wish)
5. Now run the "dd if=/where/your/part7backup-numbers.bin of=/dev/block/mmcblk0p7" and it should show the output:
xxxx bytes in
xxxxbytes out
xxxxxxxxxx copied in blah blah blah
6. Run "sync" and then reboot. (I didn't do this and it worked fine but it won't hurt either. )
If you have the engineering hboot 0.85.2007 installed you will still be showing s=off when you do the above revert steps. Follow these steps to reflash the stock hboot and turn s=on:
Download this file and unzip it to /sdcard on your device.
unroot.rar
http://www.mediafire.com/?12oi5elu7v2y8og
md5sum: aad4e64126cf8d92d7e8b5abb48fdadd
Terminal Emulator Method
1. Open up terminal editor on your device.(I prefer this method b/c you can see the output.)
a. Type "su" + enter to gain root privileges.
b. Type "cd /sdcard/unroot" + enter.
c. Type "sh unroot.sh" + enter.
d. Follow the onscreen prompts.
File Explorer Method
2. Open root explorer, sufbs, or some other file browser with root access.
a. Navigate to /sdcard/unroot.
b. Click on unroot.sh and allow it to run. Some file browsers ask permission before they execute scripts.
c. Wait 18 to 20 seconds and reboot your phone into the bootloader to check if S=on.
You now have S=ON again.
Here is a pic of the stock HBoot 0.86.0000 with S=Off to prove it.
If already on ENG bootloader, S-OFF, and perm rooted via your other guide would we be able to just run gfree for the "radio/sim" unlock?
Genocaust said:
If already on ENG bootloader, S-OFF, and perm rooted via your other guide would we be able to just run gfree for the "radio/sim" unlock?
Click to expand...
Click to collapse
Yes, that's what I did. Good call btw! I wrote the guide in a hurry just before heading to work and knew I would miss something.
My MyGlacier 4G MINE!!!
u could use root explorer to place the gfree file in data local couldn't u?
Yes you could use root explorer. I am going to revise this as soon as I get time. I'm at work right now.
As for the optional steps, you wouldn't need to do them if you already followed the other permroot guides successfully b/c you should alread have hboot 0.85.2007 installed.
My MyGlacier 4G MINE!!!
so is the 0.85.2007 is the one we want to be on?
mrpanic7 said:
my bootloader is 0.85.2007 is this the sweet one i want or the stock one?
Click to expand...
Click to collapse
Good to go. You have the engineering hboot.
Should work from either one as long as you have some kind of root access.
But ... Keep that one.
My MyGlacier 4G MINE!!!
sweet thanks, and the whole talk about subsidy unlock and flashing other device roms, is that part of the hboot im running, or the gfree file ?
Hey grankin01 this is what i have on my screen. Bec i just got this phone from warranty claim.
GLACIER PVT ENG S -OFF
HBOOT-0.85.2007 (PD1510000)
MICROP-0429
RADIO-26.03.02.26_M
eMMC-boot
oct 11 2010, 12:44:14
@mrpanic7, no its part of the gfree patch.
@topgun303, what kernel version are you running? Stock?
My MyGlacier 4G MINE!!!
sweet thanks will test tonight and comment when everything is done! how do we know if hte gfile goes thru successfully? since im already permarooted
grankin01 said:
@mrpanic7, no its part of the gfree patch.
@topgun303, what kernel version are you running? Stock?
My MyGlacier 4G MINE!!!
Click to expand...
Click to collapse
Kernal version: I have not flashed anything other kernal yet. This is what came with my phone.
2.6.32.21-g899d047
[email protected] #1
tue oct 26 16:10:01 CST 2010
Hey grankin01 I dont have adb steup, can you provide workaround for that. Meaning without adb.
Awesome man. Great job. Just to be clear. After unzipping the file, all of them need to go in the data/local folder yes?
So we can use root explorer to oaste the file, then the termunal steps?
Sent from my rooted w/s=off HTC Glacier on Iced Glacier Dark Froyo Themed 1.1.1 using XDA App
You should be able to use root explorer and yes put all files in /data/local including the hboot_dhd.nb0 file if you are going to do the optional steps.
Edit: Added mention of root explorer method between steps 4 and 5.
My MyGlacier 4G MINE!!!
hey grankin01 my phone is on engineer bootloader right now. what are the advantages of engineer bootloader vs bootloader version 0.86.0000?
Also if i flash bootloader version 0.86.0000, can i go back to engineer bootloader.
u r the maaan
after trying everything i got s=off thanx to you...but 1 lil isue the root did not stick for me after checking hboot to see if i got s=off
topgun303 said:
hey grankin01 my phone is on engineer bootloader right now. what are the advantages of engineer bootloader vs bootloader version 0.86.0000?
Also if i flash bootloader version 0.86.0000, can i go back to engineer bootloader.
Click to expand...
Click to collapse
Eng hboot will let you flash anything you want. Stock hboot will still limit your choices.
Yes you can just do the optional steps from the OP to go back to eng hboot. Actually having stock hboot will let you see if it worked without having to do anything special.
My MyGlacier 4G MINE!!!
wadie said:
after trying everything i got s=off thanx to you...but 1 lil isue the root did not stick for me after checking hboot to see if i got s=off
Click to expand...
Click to collapse
So this did work w/stock device and kernel?
Try running visionary r14 and doing permroot option. Being a stock rom you may still have to fiddle with it a little. Not quite an exact science.
My MyGlacier 4G MINE!!!
So the bootloader version 0.86.0000 provides simunlock correct? If i read correct from the first page of op. For now i think i will stay on engineer hbootloader.
Also one more thing op, I found a great video on how to setup adb. I have already got my adb setup using this. If u like you can post it in the op section. http://www.youtube.com/watch?v=1UF5w1dKe2U
I know this might sound stupid, but I've never done this with a Z before and I'm a bit scared about bricking my new phone, so...
Got my Z about a week ago, used Visionary+ (yeah, I know, boo) to temproot and restore my apps with TitaniumBackup. Unrooted with the button in the app and haven't used Visionary since. Until last night, when I wanted to take some screenshots using drocap2. Temproot failed at first, so I rebooted and tried again. This time it worked and when I was done I used Unroot again.
Only this time after rebooting my weather info was gone. Readded the clock, that didn't fix it. The weather app just said "Current City" - it wasn't showing any weather info.
I figured that's not biggie, but I found another bug which is: if I power the phone off and then back on while "Fast Boot" is on I lose access to my phone app and contacts (both show a black screen) until I do a full reboot.
So now I decided to reinstall everything and start afresh (this time I'm using rage to root ).
Right now I'm running everything stock (ROM, recovery, SPL are untouched). If I have one of the CIDs contained in the android-info.txt inside the official 1.34.405.5 RUU (HTC__032), is it okay to just run the RUU? Or should I stick to a hard reset from fastboot or recovery?
Thanks!
Try hard resetting first, this will erase all data in your phone, and if that is not working go in your device to settings>aboutphone>Softwareinformation and check there if your build number is:
1.34.405.5
if it is then let me know and I can give you a PC10IMG.zip (I have done this method before), and simply you will copy the zip to your sd card, turn on the phone into bootloader, and the phone will do the rest.
Or simply flash one of those exe RUU jsut be sure is the same build number.
My build is 1.34.405.5. The RUU I have is RUU_Vision_HTC_WWE_1.34.405.5_Radio_12.28b.60.140e_26.03.02.26_M_release_155556_signed.exe
Isn't the PC10IMG.zip a renamed rom.zip from inside the RUU?
keinengel said:
Isn't the PC10IMG.zip a renamed rom.zip from inside the RUU?
Click to expand...
Click to collapse
Yes, it is.
Both methods i.e. zip or ruu will do what you are asking for so is up to you to choose one.
I rather the zip one, since to me the ruu kind of did not work, and then I needed to install htc syn and stuff (I am a mac user, no needs for drives just as linux )
Anyhow hope I helped
Okay, I'll transfer the rom.zip to my SD card and rename it, thanks!
Which reminds me, I used Visionary because rage only seemed to be giving me shell root. TitaniumBackup couldn't seem to get root rights. I followed the steps, I'm very well accustomed to adb and fastboot commands and also shell commands, but couldn't get it up and running. I'll try again after restoring my phone.
keinengel said:
Which reminds me, I used Visionary because rage only seemed to be giving me shell root. TitaniumBackup couldn't seem to get root rights. I followed the steps, I'm very well accustomed to adb and fastboot commands and also shell commands, but couldn't get it up and running. I'll try again after restoring my phone.
Click to expand...
Click to collapse
If you had permanent root in the shell (i.e. could successfully do an "su" after a reboot"), then you had permanent root alright. If there was a problem with another app getting root rights, then it may have been something to do with the Superuser app, because that pops up and asks for permission the first time an app asks to run as root.
keinengel said:
Okay, I'll transfer the rom.zip to my SD card and rename it, thanks!
Which reminds me, I used Visionary because rage only seemed to be giving me shell root. TitaniumBackup couldn't seem to get root rights. I followed the steps, I'm very well accustomed to adb and fastboot commands and also shell commands, but couldn't get it up and running. I'll try again after restoring my phone.
Click to expand...
Click to collapse
you should not rename the zip file, unless it has other name, but it should be called PC10IMG.zip
steviewevie said:
If you had permanent root in the shell (i.e. could successfully do an "su" after a reboot"), then you had permanent root alright. If there was a problem with another app getting root rights, then it may have been something to do with the Superuser app, because that pops up and asks for permission the first time an app asks to run as root.
Click to expand...
Click to collapse
I never got permanent root, because I didn't want it. I did all the rooting, flashing radios/spls/recoveries and custom ROMs I'd ever need with my trusty old Magic. Now I'm trying to stay clean
I just needed temproot for TitaniumBackup and drocap2 - that's it. Don't need supercid, s-off or anything else - and that's what made Visionary so attractive. Too bad it's hit-and-miss.
My problem with rage was that I had root access from the terminal, but couldn't run those two apps without permanently rooting. Besides, I'm not quite sure how to unroot, should I ever need to. Would flashing the stock PC10IMG.zip from fastboot be enough? I see it overwrites most partitions, but would it also overwrite the radio config one?
keinengel said:
I never got permanent root, because I didn't want it. I did all the rooting, flashing radios/spls/recoveries and custom ROMs I'd ever need with my trusty old Magic. Now I'm trying to stay clean
I just needed temproot for TitaniumBackup and drocap2 - that's it. Don't need supercid, s-off or anything else - and that's what made Visionary so attractive. Too bad it's hit-and-miss.
My problem with rage was that I had root access from the terminal, but couldn't run those two apps without permanently rooting. Besides, I'm not quite sure how to unroot, should I ever need to. Would flashing the stock PC10IMG.zip from fastboot be enough? I see it overwrites most partitions, but would it also overwrite the radio config one?
Click to expand...
Click to collapse
Jut put the PC10IMG.zip in the root of your sd card. Then turn completly off the phone, and turn it on into bootloader (down key volume + power button), and the device shall recognize the zip.
ok so what is fast boot i see it when i hold down volume and power button it doesnt do much for me am i suppose to enable it some how i only ask becuase i see people talking about it flashing things via fastboot but im not sure what that is. also i want to flash gingervillain 1.4 and i want to have an idea what i need to do incase i want to get back to froyo
cudahy_boy said:
ok so what is fast boot i see it when i hold down volume and power button it doesnt do much for me am i suppose to enable it some how i only ask becuase i see people talking about it flashing things via fastboot but im not sure what that is. also i want to flash gingervillain 1.4 and i want to have an idea what i need to do incase i want to get back to froyo
Click to expand...
Click to collapse
You need to have the ENG. Hboot installed on your phone in order to use "Fastboot". If your not sure if you have it or not, boot into Hboot(volume down+ power) and the first line will say " VISION PVT ENG S-OFF" if it says this you have the ENG. HBOOT, but if it says "VISION PVT SHIP S-OFF" you dont and cant use fastboot. Check the WIKI for info on flashing the ENG. Hboot.
As far as flashing GingerVillian you dont need the ENG. Hboot to flash CWM 3.0.0.x you can do it from your Phone . HERE is a link on how to do it, as far as getting back to FROYO just follow the flash_image instructions for flashing CWM 3.0.0.x in the link I provided except replace the CWM 3.0.0.x with a CWM 2.5.1.3 recovery.img and rerun the commands.
ok im kind of confused do i use adb in command to write this
This next step is CRUCIAL. You must make sure that you are writing to the proper partition here or you could brick your phone. To be absolutely clear- the partition is mmcblk(zero)p(one)(eight)
(this part below)
I'd recommend using an adb shell from your computer (with root privileges: just unlock your phone, run 'su' in adb shell, a window will pop up in your phone asking you to allow it to run, check for it to remember, then allow, the prompt in adb shell will change to '#') for the following command, as it will permit you to copy/paste it:
# dd if=/data/local/hboot-eng.img of=/dev/block/mmcblk0p18
cudahy_boy said:
ok im kind of confused do i use adb in command to write this
This next step is CRUCIAL. You must make sure that you are writing to the proper partition here or you could brick your phone. To be absolutely clear- the partition is mmcblk(zero)p(one)(eight)
(this part below)
I'd recommend using an adb shell from your computer (with root privileges: just unlock your phone, run 'su' in adb shell, a window will pop up in your phone asking you to allow it to run, check for it to remember, then allow, the prompt in adb shell will change to '#') for the following command, as it will permit you to copy/paste it:
# dd if=/data/local/hboot-eng.img of=/dev/block/mmcblk0p18
Click to expand...
Click to collapse
You can do this from your phone/w terminal emulator or computer/w ADB, what it is saying is it recommends using your computer/w ADB in an ADB Shell to run this command because you can simply just copy and paste the command into the command promt so there will be no mistakes typing it out by hand, make sure you follow the instructions perfectly or you will end up with a brick. Good luck.
I can't find a solution to this from searching the forums so i'm just gonna ask.
I'm using the gfree method via adb. i'm getting all the way through it without any problems untill i get to the "lock in" root section.
I get the error message that the wiki says should get and then ignore, but i also get another message that says something like
"cp: can't stat '/sdcard/su' : no such file or directory"
any help with this would be appreciated.
also, are all the bad things i've heard about visionary true? should i go ahead and root with visionary, or keep trying this way? thanks
I just checked and it says I'm s-off. I'm very confused.
Sent from my T-Mobile G2 using XDA App
Well first ill tell u Visionary worked for me in like 10 minutes time. Very easy n very fast. Not true what they say. If u got s-off, good. Ur almost there. Have to check out gfree method quik in order to help u. Hold up
G2 with ExtraHotSauce v0.2!!
What guide are you using, the one on the Wiki doesn't have you copy (cp) anything.
is this the command where you run into the problem?
/data/local/tmp/root
Click to expand...
Click to collapse
This is running a script to lock in root, you already ran gfree while you were temp rooted so that's why you are S-OFF.
Do you have the "su" file on the root of your SD card?
You should be able to retry everything but the gfree part.
As for Visionary, some people report success but other have reported big problems. I found the gfree method to work pretty well, even though I used Visionary when I was temp-rooting (when I just got my phone) when I permarooted I used the gfree method.
raitchison said:
What guide are you using, the one on the Wiki doesn't have you copy (cp) anything.
is this the command where you run into the problem?
This is running a script to lock in root, you already ran gfree while you were temp rooted so that's why you are S-OFF.
Do you have the "su" file on the root of your SD card?
You should be able to retry everything but the gfree part.
As for Visionary, some people report success but other have reported big problems. I found the gfree method to work pretty well, even though I used Visionary when I was temp-rooting (when I just got my phone) when I permarooted I used the gfree method.
Click to expand...
Click to collapse
yes, that is the command that is giving me problems. i checked my sd card and superuser.apk is at the root of it.
when you say retry everything what exactly would i retry? i'm at work, and don't have access to adb. do i need adb to "retry"
so, there are two different guides that perm root. the first is the wiki and this is the one that i was following. the other has almost the exact same steps except it has the wpthis file. i guess when i get home i'll try the other method and see if it works. thanks for everone's help
no its a 2 step procedure maybe you should go ahead and unroot and s-on then go ahead and re root. if not you can still re run everything start off with temp root then go ahead and lock in the perma root
thenaut said:
yes, that is the command that is giving me problems. i checked my sd card and superuser.apk is at the root of it.
when you say retry everything what exactly would i retry? i'm at work, and don't have access to adb. do i need adb to "retry"
Click to expand...
Click to collapse
You should have both Superuser.apk and su on the root of your SD card. Either push it from your computer again (first command in the wiki):
Code:
adb push su /sdcard/su
Or just copy it to your SD card (be sure to unmount the card when done). Then re-run the root script in terminal.
that totally did it. I pushed the su file and re ran the script and i got root. it's wierd because i thought i pushed it the first time but i guess not. anyway, thanks
I have S-OFF but now temp root visionary won't work for me and I can't get root access. Can only $ using adb so I can't push files. Any help would be apperciated
Try the method in the Wiki - http://forum.xda-developers.com/wik...sion#Rooting_the_Vision_.28G2.2FDZ.29_and_DHD
You should still be able to push files via adb though, I don't understand your comment about getting $ with adb (don't do an "adb shell" before you run "adb push", adb is a command for running on your PC, not your phone).
Same here. I did the wiki instructions. but /data/local/root gave me the cp:not found
and /su no a directory. visionary doesnt work. and rage never works right. my "root shell" doesnt let me do su. i think i might have no su. i'm really confused why this wont work. I've done four factory resets trying the rage method and the visionary method. I have S-OFF but nothing else as far as I can tell.
EDIT: I've read a bunch of threads on this and still can't find a solution
I've read in the Rage thread that there were issues with Visionary seeing root access. I would honestly give rage another shot. It worked brilliantly for me, you just have to have ADB configured first.
I did. i get temp root but gfree wont work. i have cid and sim unlock and s off but not system r/w. and when i run /data/local/tmp/root. also my phone will randomly restart now.
steviewevie said:
Try the method in the Wiki - http://forum.xda-developers.com/wik...sion#Rooting_the_Vision_.28G2.2FDZ.29_and_DHD
You should still be able to push files via adb though, I don't understand your comment about getting $ with adb (don't do an "adb shell" before you run "adb push", adb is a command for running on your PC, not your phone).
Click to expand...
Click to collapse
I tried this and it didn't work for me.
Can I reflash somehow to the stock rom? I think visionary somehow messed up my phone.
I reflashed to 1.12 and rage worked!
So if visionary has messed up your /su you need to reflash to stock because your /system is messed up.
http://forum.xda-developers.com/showpost.php?p=10966727&postcount=63
had the same problem. had s-off and all that fun stuff. had to do this.